1、说明
参考官网
https://wiki.strongswan.org/projects/strongswan/wiki/InstallationDocumentation
2、下载strongSwan的5.9.0版本(目前最新)
wget http://download.strongswan.org/strongswan-5.9.0.tar.bz2
3、解压缩,进入到目录
tar xjvf strongswan-5.9.0.tar.bz2
cd strongswan-5.9.0
4、使用一些可用选项来配置strongSwan
./configure --prefix=/usr/local --sysconfdir=/etc –
其中:
–prefix //文件安装目录, [/usr/local]
–sysconfdir //配置文件目录, [ prefix/etc ]
–enable/–disable //启用或禁用某些插件
输入如下命令:
./configure --prefix=/usr/local --sysconfdir=/etc
可能会出现如下配置错误:
1)configure: error: GNU Multi Precision library gmp not found
解决方法:安装GMP库和GMP的开发库
sudo aptitude install libgmp10
sudo aptitude install libgmp-dev
2)configure: error: OpenSSL libcrypto not found
解决方法:
sudo apt-get install libssl-dev
3)configure: error: PAM library not found
解决方法:
sudo apt-get install libpam0g-dev
添加插件配置,输入命令:
./configure --prefix=/usr/local --sysconfdir=/etc --enable-eap-identity --enable-eap-md5 --enable-eap-mschapv2 --enable-eap-tls --enable-eap-ttls --enable-eap-peap --enable-eap-tnc --enable-eap-dynamic --enable-eap-radius --enable-xauth-eap --enable-xauth-pam --enable-dhcp --enable-openssl --enable-addrblock --enable-unity --enable-certexpire --enable-radattr --enable-swanctl --enable-openssl --enable-save-keys
配置成功,显示:
5、编译和安装
make
sudo make install
6、通过ipsec验证安装是否成功
ipsec start
ipsec restart
ipsec version